Data Protection
[borlabs-cookie type=”btn-cookie-preference” title=”Cookie Settings”/]
The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Apartments Thommen – Constanze Thommen
Lohengrinstr. 6
90461 Nuremberg
Phone +49-(0)176-43105300
Email: info@apartments-thommen.de
Purpose of collecting, storing, and processing your personal data
We collect, store, and process your personal data only for the purposes stated in this privacy policy and on the basis of Article 6 of the GDPR.
These purposes are the following:
– to process a contract with you (e.g., a reservation you requested)
– to fulfill a legal obligation (e.g., pursuant to Section 29 et seq. of the Federal Ministry of Health Act)
– to protect legitimate business interests if there is no reason to assume that you have an overriding legitimate interest in the storage and processing of your data.
Personal data (name, address, email address, etc.) that you provide to us via the website (e.g., in connection with an apartment inquiry) will only be collected, processed, and/or used for the purpose for which you provided the data (Article 6 GDPR). This occurs within the framework of the applicable legal regulations or only with your consent. By submitting a reservation request to us by email, using an online portal, by phone, or by visiting us in person, we assume that we may store and use your personal data, insofar as it is necessary for a reservation in the spirit of data economy.
The processing of your personal data is based on our legitimate interest in the aforementioned data collection purposes. We do not use your data to draw conclusions about you personally. The only recipients of the data are the responsible party and, if applicable, contract processors.
Your personal data will generally not be transferred to third parties. In exceptional cases, we will only share your personal data with third parties if:
– you have given your express consent,
– the processing is necessary to fulfill a legal obligation,
– the processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding legitimate interest in not sharing your data.
Data will generally not be transferred to a third country.
Deletion or Blocking of Data
We adhere to the principles of data avoidance and data economy.
We therefore only store your personal data for as long as necessary to achieve the purposes stated here or as required by the various retention periods stipulated by law. Once the respective purpose no longer applies or these deadlines have expired, the corresponding data will be routinely blocked or deleted in accordance with legal regulations.
Your rights as a data subject
– In accordance with current law, you have a variety of rights regarding the collection, storage, and processing of your personal data. Below, we inform you about these rights:
– You have the right to request confirmation as to whether the data in question is being processed, and to access this data, as well as further information and a copy of the data in accordance with Art. 15 GDPR.
– In accordance with Art. 16 GDPR, you have the right to request that the data concerning you be completed or that inaccurate data concerning you be corrected.
– In accordance with Art. 17 GDPR, you have the right to request that the data in question be deleted immediately, unless a legal provision prohibits this, or alternatively, to request a restriction of data processing in accordance with Art. 18 GDPR.
– You have the right to request the receipt of the data concerning you that you have provided to us in accordance with Art. 20 GDPR and to request its transmission to other responsible parties.
– You also have the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 GDPR.
A list of supervisory authorities (for the non-public sector) and their addresses can be found at: https://www.bfdi.bund.de/DE/.
Collection of general information when visiting our website
When you access our website, general information is automatically collected using a cookie. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, and similar information. This information is solely information that does not allow any conclusions to be drawn about you personally.
This information is technically necessary to correctly deliver the website content you request.